Stars
Forks
Watchers
Developer links
Duplicati
Encrypted, incremental, compressed backups on storage you already have - Amazon S3, Backblaze B2, Google Drive, Azure, OneDrive, Dropbox, MEGA, Storj, WebDAV, SFTP, FTP, SMB, or a plain local disk - is what the MIT-licensed Duplicati has quietly done for years. Its security model is Trust No One: every block is encrypted with AES-256 (or a local GPG instance) before leaving the machine, and the passphrase never travels, so the storage provider holds only ciphertext. The block-based storage engine gives the best of both backup worlds: after one initial full backup, only changed data blocks upload - modify a tiny part of a huge file and only that part transfers - yet every backup version restores like a full backup in a single operation, with no incremental chains to replay. Deduplication and compression keep remote storage growth slow even across years of versions. A web interface manages everything: the built-in scheduler keeps backups current automatically, flexible filters select folders, file types, or custom patterns, retention policies prune old versions, and an integrated updater flags new releases. On compatible object-lock backends, immutable (WORM) storage protects backup data from ransomware that reaches the credentials. Runs on Windows, macOS, and Linux, free even for commercial use.
Benefits
- The Cloud Never Sees Your Data
- AES-256 encryption happens locally and the key never leaves your machine - the TNO principle means a provider breach exposes nothing.
- Big Files, Tiny Uploads
- Block-level incremental backups upload only changed chunks, so daily backups of large files cost megabytes, not gigabytes.
- Every Version Restores Like a Full
- No incremental chains to replay - any point in history restores in one operation despite incremental storage efficiency.
- Your Storage, Your Rules
- S3, B2, Drive, Azure, SFTP, or the NAS in the closet - Duplicati backs up to whatever you already pay for or own.
Features
- AES-256 or GPG Encryption
- All data encrypted client-side before transfer; the passphrase never leaves your machine.
- Block-Based Incrementals
- Deduplicated, compressed chunks mean only changed data uploads after the first backup.
- Dozens of Destinations
- S3, B2, Google Drive/Cloud, Azure, OneDrive, Dropbox, MEGA, Storj, WebDAV, SFTP, FTP, and local paths.
- Scheduler and Retention
- Automatic recurring backups with configurable version pruning policies.
- Flexible Selection
- Back up folders, specific file types, or custom filter patterns.
- Ransomware Resistance
- Immutable WORM storage via object locking on compatible backends.